Avoid getting scammed by fake "You Have Received A Bitcoin Transfer" sites
Written by Tomas Meskauskas on (updated)
What kind of scam is "You Have Received A Bitcoin Transfer"?
While investigating suspicious webpages, our researchers discovered the "You Have Received A Bitcoin Transfer" scam. It states that the user has been sent an anonymous gift of Bitcoin cryptocurrency (BTC).
The scheme takes the victim through multiple hoops to receive the hoax BTC transfer. All the while, the scam collects the user's personal information and ultimately requests them to pay a fee to facilitate the transfer. Naturally, no amount will be sent to the victim's cryptowallet, and they will lose their funds instead.
"You Have Received A Bitcoin Transfer" scam overview
The initial scam webpage informs the visitor that they have received a transfer of Bitcoin cryptocurrency (BTC). The sender wanted to remain anonymous and wished it to be a New Year's gift. The amount is listed as 0.74835 BTC, which at the current exchange rate is worth approximately 32 thousand USD (note that rates fluctuate constantly).
The scam redirects the user through multiple pages, such as ones asking for confirmation and adding details like the transfer requiring acceptance within 24 hours, or else it will return to the sender. Another page requests the user to provide their full name to access their account securely.
Receiving the nonexistent cryptocurrency will necessitate paying a fee comprising 0.7% off the transfer for storage and 0.025% for informing the recipient of the transaction; the total is listed as 0.00523845 BTC (currently worth approximately $200). Yet a different page states that the payment will be $76 (rapid fluctuations in exchange rates likely account for the difference).
The victim is then asked to provide their cryptocurrency wallet address and pay the bogus fee. The last webpage requests the user's name again, as well as their email address and telephone number. Said information could be utilized to craft personalized scams and/or be sold to third-parties. This carries significant risks of severe privacy issues, financial losses, system infections, and identity theft.
It must be stressed that victims of the "You Have Received A Bitcoin Transfer" scam will receive no amount of cryptocurrency and will only lose the amount they transfer. Retrieval is impossible since cryptocurrency transactions are practically untraceable.
| Name | "You Have Received A Bitcoin Transfer" scam website |
| Threat Type | Phishing, Scam, Social Engineering, Fraud |
| Fake Claim | User has received a transfer of Bitcoin cryptocurrency (BTC) as an anonymous New Year's gift. |
| Related Domains | telegra[.]ph, members-getbtc-pro[.]top |
| Detection Names (telegra[.]ph) | CyRadar (Malicious), ESTsecurity (Malicious), StopForumSpam (Spam), Full List Of Detections (VirusTotal) |
| Serving IP Address (telegra[.]ph) | 149.154.164.13 |
| Detection Names (members-getbtc-pro[.]top) | Avira (Phishing), CRDF (Malicious), ESET (Phishing), Kaspersky (Phishing), Sophos (Phishing), Full List Of Detections (VirusTotal) |
| Serving IP Address (members-getbtc-pro[.]top) | 91.215.85.242 |
| Distribution methods | Compromised websites, rogue online pop-up ads, potentially unwanted applications. |
| Damage | Loss of sensitive private information, monetary loss, identity theft, possible malware infections. |
| Malware Removal (Windows) | To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. |
Similar scam examples in general
We have examined countless online scams; "X Token Presale", "Bonk Coin scam", and "CLAIM HYTOPIA TOKEN" are merely a couple examples of cryptocurrency-centric schemes.
Other common scam models include fake lotteries, giveaways, product promotions, system errors, virus threat alerts, outdated software warnings, etc. Yet regardless of what the schemes claim – the sole purpose is to generate revenue at victims' expense.
How did I open a scam website?
The "You Have Received A Bitcoin Transfer" scam has been noted being promoted via spam emails in French and English promising a thirty thousand USD New Year's gift. However, other lures and promotional methods are not unlikely.
Spam is often utilized in scam endorsement (e.g., emails, PMs/DMs, SMSes, notifications, forum/ social media posts, etc.). Other common points of access to deceptive webpages are redirects caused by sites employing rogue advertising networks, intrusive ads, misspelled URLs, or installed adware.
How to avoid visiting scam websites?
We highly recommend being vigilant when browsing since fraudulent and malicious online content usually appears legitimate and harmless. For example, intrusive adverts and spam browser notifications may look innocuous yet redirect to unreliable/dubious webpages (e.g., scam-promoting, gambling, pornography, adult dating, etc.).
Another recommendation is to treat incoming emails and other messages with caution. Attachments or links found in suspect mail must not be opened, as they can be harmful.
We advise against using websites that offer pirated software/media or other questionable services (e.g., Torrenting, illegal streaming or downloading, etc.), as these sites are typically monetized via rogue advertising networks. Additionally, pay attention to URLs and enter them carefully.
To avoid receiving undesirable browser notifications – do not permit suspicious pages to deliver them (i.e., do not click "Allow", "Allow Notifications", etc.) – instead, ignore or deny these delivery requests (i.e., select "Block", "Block Notifications", etc.).
To prevent bundled/dangerous software from infiltrating the system – download only from official/verified sources and be careful when installing programs (e.g., read terms, study available options, use "Custom/Advanced" settings, and opt out of additional apps, extensions, tools, etc.).
If your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate all threats.
Text presented in "You Have Received A Bitcoin Transfer" scam:
Personal message!
December 15, 2023
Transfer No 60451193
You have received a bitcoin transfer!
Good night! You have a new bitcoin transfer on your name. Bitcoin Address Sender bc1q7*****ccg8v
Amount: 0.74835 BTC
You received a transfer with the comment: "Anonymously. A New Year's gift from a person who wishes you success and prosperity. Use this money as you see fit."
ACCEPT TRANSFER
The appearance of "You Have Received A Bitcoin Transfer" scam (GIF):
Screenshot of a spam email used to promote the "You Have Received A Bitcoin Transfer" scam:
Text presented in this email letter:
Subject: -: URGENT! Your New Year's gift is $30,970. Confirm transfer
Une demande de contact a été formulée par e-mail via - de la part de :
Davidanoke ;
URGENT! Your New Year's gift is $31,435. Confirm transfer -
Instant automatic malware removal:
Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.
Quick menu:
- What is "You Have Received A Bitcoin Transfer" scam website?
- How to identify a pop-up scam?
- How do pop-up scams work?
- How to remove fake pop-ups?
- How to prevent fake pop-ups?
- What to do if you fell for a pop-up scam?
How to identify a pop-up scam?
Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.
While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.
Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:
- Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
- Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
- Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
- Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
- Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.
Example of a pop-up scam:
How do pop-up scams work?
Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.
Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.
How to remove fake pop-ups?
In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.
In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.
How to prevent fake pop-ups?
To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.
To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.
What to do if you fell for a pop-up scam?
This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.
- If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
- If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
- If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
- Help other Internet users: report Internet scams to Federal Trade Commission.
Frequently Asked Questions (FAQ)
What is an online scam?
Online scams are fake messages intended to trick users into performing certain actions. For example, victims can be enticed/scared into disclosing private data, making monetary transactions, purchasing products, subscribing to services, downloading/installing software, calling fake support lines, allowing cyber criminals to access devices remotely, and so on.
What is the purpose of online scams?
Online scams aim to generate revenue at victims' expense. Cyber criminals profit predominantly by obtaining funds through deception, selling or abusing vulnerable information, promoting content (e.g., websites, software, products, etc.), and spreading malware.
I have provided my personal information when tricked by an online scam, what should I do?
If you have provided your log-in credentials – immediately change the passwords/passphrases of all possibly exposed accounts/platforms and inform their official support. And if you've disclosed other private data (e.g., ID card details, passport photos/scans, credit card numbers, etc.) – contact relevant authorities without delay.
I have sent cryptocurrency to the "You Have Received A Bitcoin Transfer" scam, can I get my money back?
No, since cryptocurrency transactions are virtually untraceable – they are practically irreversible.
Why do I encounter online scams?
Online scams are hosted on deceptive websites, which are seldom accessed intentionally. These pages are primarily entered through redirects generated by sites that use rogue advertising networks, spam browser notifications, mistyped URLs, intrusive ads, or installed adware. It is pertinent to mention that the "You Have Received A Bitcoin Transfer" scam has been observed being endorsed via email spam campaigns.
Will Combo Cleaner protect me from online scams?
Combo Cleaner is capable of scanning visited websites for rogue, deceptive, and malicious content. Hence, if you enter such a page – you will be warned immediately, and further access to it will be denied.
Outstanding!
▼ Show Discussion